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28 EvidenceCollectionAtCrimeScenes 



Police Investigations 

It is essential for the operative to understand how criminal investigations are conducted and 
just what can and cannot be determined from crime scene evidence. This knowledge will allow 
the operative to reduce the risk that law enforcement will be able to identify, build a case 
against, and successfully prosecute him or her. 

Fingerprints 

Fingerprints are possibly the most common type of physical evidence, and certainly one of the 
most valuable to investigators. Each person's fingerprints are unique to them and do not 
change significantly over time. Therefore, they offer the investigator the ability to identify the 
person who left them at the crime scene. There are three types of fingerprints which are 
collected as evidence; 

- Direct or Inked Fingerprints which are collected from a suspect and use for comparison with 
crime-scene prints. 

- Latent Fingerprints which are impressions caused by the perspiration through the sweat 
pores of the ridges of the skin being transferred to some surface. 

- Residual Fingerprints which are produced when the ridges of the skin have been 
contaminated with substances such as oil, grease, dirt, blood etc. 

Fingerprints deposited on hard, nonabsorbent, smooth surfaces, such as metal, glass, and 
finished wood, are the easiest investigators to find and record. Fingerprints deposited on 
porous, absorbent surfaces are the most difficult for investigators to find and process but the 
technology exists the obtain fingerprints off of nearly any surface, provided they are processed 
soon after being deposited. 

Standards differ from jurisdiction to jurisdiction regarding the number and quality of prints 
which must be obtained from the crime-scene and matched to a suspect in order for them to 
be submitted as evidence in court. Police, however, could possibly identify an operative from 
just one partial fingerprint. This evidence would be useless in court, but would make the 
operative vulnerable to further, aggressive investigation. 
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The only way to avoid this is to simply not leave any fingerprints behind. Wearing surgical 
gloves during every stage of a given mission is the simplest way to achieve this. Every item the 
operative brings along on a mission must have none of the operative's (or any Comrade's) 
fingerprints on it. Special care must be taken to be sure that items, such as weapons, tools, 
and explosives, which have been handled before a mission, are free of incriminating 
fingerprints. 




White Resistance Manual 

Examples of fingerprint evidence. From top left; Loop, Arch, Whorl and Tented Arch. 

Body Fluids 

Body fluids are of great importance to the investigator. Because of the unique character of 
each individual's DNA, the crime lab can rule a suspect out based on DNA samples or make 
statements such as " there is a 1 in 9,000,529,200 chance that someone other than the 
suspect deposited the sample found at the crime scene". This type of evidence is obviously 
very powerful. 

DNA samples can be obtained from liquid or dried blood, saliva, urine and perspiration. 
Samples can also be obtained from human milk and semen but these are not the types of 
samples the operative is likely to leave behind. 

How can the White Resistance Fighter avoid leaving this type of evidence for investigators to 
find? 

- Never urinate, eat, drink or smoke at or near the mission target. Saliva samples can be 
obtained from unfinished portions of food, beverage containers and cigarette butts. The 
operative may be forced to violate this guideline when lying in ambush or in a sniper's nest for 
extended periods. In this case the operative must use care not to leave samples behind for 
investigators to obtain. 
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- Never lick stamps or envelopes to be use to threaten enemies, to claim responsibility for acts 
of war or when making letter or package bomb attacks. 

- The operative should do everything possible to avoid cuts and abrasions during the course of 
a mission. Chose routes of ingress and egress which are free of obstructions. Wear tough 
clothes, footwear and, of course, gloves. 

- Whenever the operative is forced to come into physical contact with the enemy there is 
potential for body fluid samples to be deposited. The best way to prevent this is to become 
proficient in armed and unarmed combat so that enemies can be dealt with quickly and the risk 
of injury to the operative reduced. 

There is also potential for the body fluids of the target of an attack or some contaminants from 
the crime scene to be deposited on the operative during the course of a mission. This potential 
is particularly strong in missions of Selective Assassination. When using weapons such as 
knives and firearms fired at close range, the operative is sure to become contaminated with 
samples of the target's blood. There is also potential for gunshot residue, trace elements from 
explosives, hair + fiber, and soil evidence to be deposited upon the operative's person and 
clothing. 

The operative must begin each mission with a set of sterile cloths and destroy them 
afterwards. The clothing and footwear worn by the operative during a mission should be 
obtained from second-hand clothing stores or from services which provide used clothing to the 
poor. The clothing should be kept sealed in the bag from the store and not washed or worn 
before the mission. This is a simple and cheap way for the operative to be supplied with sterile 
clothing, which will be free of hair, fiber and trace elements evidence from the operative's 
vehicle, residence or person. These clothes can be removed and destroyed after the 
completion of the mission. 

Trace Elements 

This type of evidence is also frequently referred to as hair and fiber evidence. Trace evidence 
can be loosely defined as materials which are small enough to be overlooked upon initial 
inspection, and which, because of their size, are easily exchanged through contact. Examples 
of trace evidence include, hair, fiber, gunshot residue, threads, soil, debris, dust and 
chemicals, adhesives, polymers, paints, wood, insulation from safes and metals. 

The detection of trace evidence linking a suspect to the crime scene, coupled with good 
evidence standards, makes for a powerful investigative tool. The White resistance fighter must 
be aware of the potential links which law enforcement can make from trace evidence deposited 
at the crime scene or transferred from the crime scene to the operative's body, clothes, 
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Comparison of Hair Evidence Comparison of Wool Fibers 

Most trace evidence is transferred by way of clothing and footwear so the use of sterile 
clothing will eliminate many of the links back to the operative which law enforcement will 
attempt to establish. 

Hair evidence is a major concern. Human hair is constantly being shed and crime scene 
investigators will collect any hair evidence. Hair can be used to determine the following things: 

- The race of the individual 

- The part of the body from which the hair originated 

- Whether or not the hair was forcibly removed 

- Whether the hair had been cut with a dull or sharp instrument 

- If the hair had been dyed or bleached 

- Whether the hair had been burned or crushed 

- It is possible, under certain circumstances, for the investigator to obtain a DNA sample from 
hair evidence. 

Possible conclusions concerning hair sample analysis: 
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- That the hairs match in terms of microscopic characteristics and that they originated from 
either the same individual or another individual whose hair exhibits the same microscopic 
characteristics. (Note the qualification that is necessary with respect to precise identity.) 

- That the hairs are not similar and did not originate from the same individual. 

- That no conclusion can be reached 

Very short cropped hair or a tight-fitting hat or knit cap will reduce the amount of hair evidence 
deposited at any crime scene. A hat, however, will contain a large number of the operative's 
hair and if the hat is left behind it will provide the investigators with a significant resource of 
evidence. 

Tool Marks 

For the purposes of this document, a tool will be considered as any object capable of making 
an impression on another solid object. A tool mark, therefore, is any impression, cut gouge or 
abrasion which results when a tool is brought into contact with an object. The most common 
tools dealt with by law enforcement are the various burglary tools, such as pry-bars, 
screwdrivers, lockpicks etc. 

A tool will often impress its own outline, know as tool marks, into the material it comes into 
contact with. These tool marks can provide valuable evidence to an investigator as to what 
type of tool was used and can allow the investigator to identify a recovered tool as being 
responsible for making the marks. Fractured parts of tools, even very small pieces, can be 
linked to the tool from which they came. 




Comparison of Tool Marks 

The operative should be well aware of the ability of investigators to identify just about anything 
you bring to the target location as having been there and this is especially true for tools. The 
operative may have to make forced entry into a residence or other buildings and vehicles in the 
course of planting explosives, selective assassination or for the purpose of acquiring funds or 
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weapons needed. The tools used on such missions should be sterile, i.e. they should not have 
the operatives fingerprints on them or any residue evidence which link them back to the 
operative. Scrounge or liberate any tools needed and store them as described for sterile 
clothing, yard sale and flea markets are excellent sources for cheap tools. A sterile tool is best 
left at the crime scene, making it a dead end for investigation. 

Any tool which must be kept due to its value should be altered by working its contact surfaces 
with a file or abrasive before and after any mission. Altering the tool before a mission is 
necessary because the tool may have been used or tested at the operative's residence, 
allowing an investigator to link the tool back to this earlier use. 

Eyewitnesses 

There is a well known saying amongst prosecutors that "the only thing worse than no evidence 
at all is eyewitness evidence". This reflects the fact that the average person who witnesses a 
crime has no training in observation skills. Most people don't really take note of what the 
suspect looks like, what kind of clothes the suspect wore, or what type of weapons or vehicles, 
if any, were used. This fact is a double-edged sword to the operative; on one hand any 
eyewitnesses will generally be of only marginal help to investigators but on the other hand, 
when investigators have the operative targeted as a suspect it is very easy for them to 
influence the testimony of eyewitnesses. 

The operative must do everything possible to avoid being noticed by witnesses while 
conducting missions. Here are some things to remember: 

- It is important to avoid making eye-contact with passersby while travelling to and from the 
target area. Eye-contact is both a sexual signal and a threatening gesture and will be sure 
cause witnesses to take note. 

- Dress to fit into the surroundings at the target area. 

- Earth tones and a drab appearance will go a long way to reducing the number of witnesses 
who take note of the operative. 

- Don't exhibit signs of strength or alertness, keep the muscles of the chest and shoulders 
relaxed and slightly slouched. This will make witnesses dismiss you as unthreatening without a 
second glance. 

- Don't wear a disguise which will draw undue attention. A good example is a police uniform; 
this is possibly the worst imaginable disguise and should only be used when absolutely 
necessary. A police officer's appearance and activities are usually noticed by everyone and 
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people are likely to approach a police officer with questions or comments. A construction 
worker, on the other hand, will often be given the same level of unchallenged access as a cop 
but, at the same time, will draw less attention. 

- Don't speak or interact with anyone unless absolutely necessary 

Video Surveillance 

Surveillance cameras are a common resource for law enforcement. When investigating a 
crime, investigators will look at the tapes recorded by business security cameras in the area of 
the crime scene, near the suspect's residence and along any possible routes between the 
previous two locations. The sheer number of cameras in use today gives the investigator a 
good chance of obtaining damning evidence that a suspect was in the vicinity of the crime 
scene or traveled along a route to it before or away from it after the crime was committed. 
Many high-profile cases have included this element of evidence recently. 

In order to avoid being caught with this type of evidence the operative should take a round- 
a-bout route to the target area, avoiding downtown storefronts, banks, jewelry or electronics 
shops or anywhere else that is likely to have security cameras. Vehicles owned by the 
operative, or which can be linked to the operative or any other comrade should not be used as 
transportation directly to and from the target area. If absolutely necessary drive to a spot which 
is several blocks from the target and walk from there. If a getaway car is required for the 
mission it must be a stolen vehicle, preferably one stolen very recently Use public 
transportation or walk to the target if possible, rush hour is the best time for this as anonymity 
can easily be maintained in a crowd. A disguise of some sort should be worn but don't get too 
fancy with this, a ball-cap, dark sunglasses and some uncharacteristic clothing will make a 
more convincing cover than a fake wig, beard or anything else which is too extravagant. 

Forensic Firearm Evidence 

In the event of most shootings and nearly all firearm homicides an investigation involving 
Forensic Firearm Identification is conducted. A racially motivated attack or the assassination of 
one of the System's elite will almost certainly result in all the available resources of law 
enforcement being brought to bear including a meticulous investigation of forensic firearms 
evidence. It is important for the operative to understand the nature of this type of investigation 
and just what can and cannot be determined through forensic investigations. A good 
understanding of the investigative process will help the resistance fighter to reduce the 
chances of leaving useful evidence at a crime scene or of being caught in possession of such 
evidence later. 

Forensic firearm identification, which is part of the broader science of forensics, is often 
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wrongly referred to as ballistics. Firearms identification involves the identification of fired 
bullets, cartridge cases or other ammunition components as having been fired from a specific 
firearm. Firearms identification is actually a form of Tool Mark Identification where the firearm, 
because it is made of a material harder than the ammunition components, acts as a tool to 
leave impressions and striated markings on the various ammunition components that come 
into contact with the firearm. 

Firearms evidence found at a crime scene or seized elsewhere will be submitted to a police 
lab's Firearms Section for investigation. This evidence will typically include a firearm, fired 
bullets, spent cartridge cases, spent shot shells, shot, shot shell wadding, live ammunition, 
clothing, or a number of other types of miscellaneous evidence. 

Studies have shown that no two firearms, even those of the same make and model, will 
produce the same unique marks on fired bullets and cartridge cases. Manufacturing 
processes, use, and abuse leave surface characteristics within the firearm that cannot be 
exactly reproduced in other firearms. 

Firearms do not normally change much over time. This allows for firearms recovered months 
or even years after a shooting to be identified as having fired a specific bullet or cartridge case. 
Tests have been conducted proving that even after firing several hundred rounds through a 
firearm the last bullet fired could still be identified to the first. 

It should be noted that not all firearms leave consistent reproducible marks but around eighty 
percent of the firearms examined produce what is sometimes called a "mechanical fingerprint" 
on the bullets and cartridge cases that pass through them. 

All cases that involve firearms identification start with preliminary examinations of the evidence 
for similar class characteristics. Class characteristics are intentional or design 
characteristics that would be common to a particular group or family of items. 

The class characteristics of firearms that relate to the bullets fired from them include the caliber 
of the firearm and the rifling pattern contained in the barrel of the firearm. 

Cartridges and Cartridge cases on the other hand are examined for class similarities in what 
are called breech marks, firing pin impressions, extractor marks, ejector marks and others. 

Bullets collected for comparison to a specific firearm are examined first to see if they are of a 
caliber that could have been fired from the submitted firearm. They are then examined to 
determine if the pattern of rifling impressions on the bullet match the pattern of rifle contained 
in the barrel of the questioned firearm. If these class characteristics agree the next step is to 
try to make a positive match between the individual characteristics that may have transferred 
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to the bullet from the barrel. 



Located within the rifling impressions on a bullet can be microscopic striations or scratches like 
those seen on the bullet below. They sort of look like a bar code don't they? Well they can be 
as individualistic as a barcode. 




Imperfections in the surface of the interior of the barrel leave striations 
on the projectiles. Striations have the potential to be consistently 
reproduced in a unique pattern on every bullet that passes down the 
barrel of a firearm. 

Caliber 

When a bullet is submitted for comparison to a firearm, one of the first 
examinations conducted will be to determine the bullet's caliber. 



Measuring the bullet's diameter, weighing the bullet, and examining the physical characteristics 
of the bullet help firearm examiners to arrive at a basic caliber for the submitted bullet. Firearm 
examiners also can compare the questioned bullet to known reference standards. Most police 
labs have an ammunition reference collection and manufacturers catalogs that can be used as 
reference material in determining a bullet's caliber. 

Making these determinations is not as easy as it sounds. 




A firearm examiner could easily identify the above bullet as a Federal 9mm "Hydra-Shok" 
bullet 
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However a bullet like the one above will present serious problems for the examiner. Is the 
bullet from a 9mm Luger, a .38 Special, a 380 Auto, or a .357 Magnum cartridge? Sometimes 
firearm examiners can be very specific but there are times when its impossible to narrow 
things down to one particular caliber or cartridge. Confusion is often caused by the fact that 
firearms are normally designed to fire a specific type of cartridge, however, some firearms 
chambered to fire one cartridge can also fire another. One of the most common examples is 
that a revolver chambered for .357 Magnum cartridges can also fire a .38 Special cartridge. 
However, a firearm chambered for .38 Special cartridges cannot fire .357 Magnum cartridges. 

If the caliber of the bullet submitted for examination matches the caliber of the submitted 
firearm or if it just isn't possible to be sure of the bullet's caliber, the firearm examiner will look 
for additional class characteristics in the form of rifling to further narrow their search. 

Rifling 

Most modern pistols, revolvers, rifles, and some shotgun barrels have what is called rifling in 
their barrels. 

Rifling consists of grooves cut or formed in a spiral nature, lengthwise down the barrel of a 
firearm. 




Rifling is placed in the barrels of firearms to impart a spin on the bullets that pass through it. 
Because bullets are oblong objects, they must spin in their flight, like a thrown football, to be 
accurate. Looking down the barrel of a firearm you might see rifling like that depicted on the 
right. This image shows a pattern of rifling containing eight grooves with a right twist. 

Rifling is often described in reference to the number of lands & grooves it contains. The lands 
are the raised areas between two grooves. A rifling pattern will always have the same number 
of lands as grooves. 
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Firearms can be manufactured with any number of lands and grooves in their barrels. They 
can also spiral either left or right. A few of the more common rifling patterns are 4/right, 5/right, 
6/right, 6/left, 8/right, and 1 6/right. 

Rifling Impressions 

A bullet is slightly larger in diameter than the bore diameter of the barrel in which it is designed 
to be fired. The bore diameter is the distance from one land to the opposite land in a barrel. As 
a result, a rifled barrel will impress a negative impression of itself on the sides of the bullet like 
those seen below. 




Firearm examiners can run into problems determining any of the rifling characteristics on the 
bullet if the bullet is damaged like the one seen below. 




A firearms examiner may still be able to determine the number of lands and groves, the 
direction of twist and possibly even the rate of twist from even a badly damaged bullet like the 
one above. All that is required is one intact land and grove. 

Cartridge Case Identification 

Like bullets, cartridge cases can be identified as having been fired by a specific firearm.As 
soon as cartridges are loaded into a firearm the potential for the transfer of unique tool marks 
exists. However, the cartridge does not have to be fired for these marks to be transferred. 
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Simply loading a cartridge into a firearm can cause unique identifiable marks that can be later 
identified. 




Cartridge cases like those above are most often made of brass but can also be made of other 
materials such as steel, aluminum alloys or plastics. Cartridge cases come in a variety of 
finishes but all are made of a material that is softer than the materials found in a firearm. Any 
surface of the cartridge case that meets the inner workings of the firearm may be marked. 

Tool marks produced on the cartridge cases will be in two basic forms. As the microscopic 
striations found on bullets, cartridge cases can pick up striated action marks. These 
"scratches" are produced when the cartridge case moves laterally against the tool (inner 
surface of the firearm) producing a scrape or striated mark. The other form of marks that can 
be left on a cartridge case are impressed action marks. Impressed marks are created on 
cartridge cases when it impacts the tool (again, the firearm) with adequate velocity or pressure 
to leave an impressed or indented mark. 

Cartridge cases are compared to fired standards from a firearm using a comparison 
microscope as described in the bullet identification section. Standards are first examined to 
determine what marks, if any, the firearm is consistently reproducing. Evidence cartridge cases 
are then directly compared to the standards to see if they too are also similarly marked. 

Striated Action Markings 

Striated action marks are common to cartridge cases that have passed through the action of 
an auto loading or repeating firearm. Striated action marks can be produced on cartridge cases 
by contact with a number of different areas within the firearm. Some of the more common 
striated action marks include chamber marks; shear marks, firing pin drag marks, extractor 
marks, and ejector marks. 

Chamber Marks 

One of the most common striated action marks are called chamber marks. Roughness in the 
chamber of a firearm can scratch the outer walls of a cartridge case when loaded and removed 
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from the chamber. Most chamber marks occur after the cartridge is fired. Cartridge cases 
expand when fired pressing out against the walls of the chamber. When they are pulled out of 
the chamber, the sides of the cartridge case can be scratched. 

Shear Marks 

Another common striated action mark are shear marks produced by Glock pistols on cartridge 
case primers. Glock pistols have a rectangular firing pin hole in their breech face. When a 
cartridge case is forced backwards from recoil the primer imbeds itself in the firing pin hole. As 
the slide of the pistol starts to recoil, the barrel will drop slightly as the action opens. The 
dropping barrel forces the cartridge case to move down slightly and when this happens the 
lower edge of the imbedded primer is sheared downward and out of the firing pin hole. 

Firing Pin Drag Marks 

In a similar process, striated marks called firing pin drag marks can be produced. When the 
firing pin springs forward to strike the primer of a cartridge, it may remain slightly forward and 
imbedded in the primer. Certain barrels (like in the Glock) drop down slightly as recoil is forcing 
the action open. The cartridge case drops with the barrel causing the nose of the protruding 
firing pin to drag across the primer as it leaves the firing pin impression. 

Extractor Marks 

Another action mark, usually found in a striated form, are those created by the extractor of 
most auto-loading or repeating firearms. The extractor is a small part sometimes resembling a 
hook that is used to remove a cartridge or cartridge case from the chamber of a firearm. The 
image below shows the extractor of a 9mm Glock pistol hooked into the extractor groove of a 
cartridge. As the slide of the pistol moves to the rear, the extractor pulls the cartridge case 
along with it until it is ejected from the pistol. The extractor may or may not leave an identifiable 
mark on the cartridge case. This is true if the cartridge is fired or simply hand chambered and 
extracted without firing. 

Ejector Marks 

As described above, the extractor pulls the cartridge case out of the firearm's chamber. As the 
cartridge case is pulled to the rear it will be struck somewhere on an opposing edge by a part 
as seen below called the ejector. The ejector is designed to expel the cartridge case from the 
action of the firearm. The resulting impact of the cartridge case with the ejector will cause 
another action mark that can be used as a means of identification. Ejector marks can be 
striated in nature but most of the time they are impressed action marks. 
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Impressed Action Markings 

Impressed action marks, with a few exceptions, are produced when a cartridge case is fired in 
a firearm. The two most common impressed action marks are firing pin impressions and 
breech marks. As mentioned earlier ejector marks can also be in the form of an impressed 
action mark. 

Firing Pin Impressions 

Firing pin impressions are indentations created when the firing pin of a firearm strikes the 
primer of centerfire cartridge case or the rim of a rimfire cartridge case. If the nose of the firing 
pin has manufacturing imperfections or damage, these potentially unique characteristics can 
be impressed into the metal of the primer or rim of the cartridge case. 

The comparison image below shows the firing pin impressions on two centerfire cartridge 
cases. As you can see, the firing pin impressions have both circular manufacturing marks and 
parallel marks from a defect in the nose of the firing pin. 




The comparison image below shows firing pin impressions on two rimfire cartridge cases. 
Imperfections in the surface of the nose of the firing pin consistently produced these impressed 
marks. 




Firing pin impressions also can be found on live cartridges. In some cases, the firing pin may 
miss the primer of a cartridge or fail to strike the primer of a cartridge with sufficient force for it 
to discharge. The cartridge may also misfire due to a contaminated or deteriorated primer 
compound. For whatever reason, the result will be the presence of a firing pin impression on 
the cartridge case of a live cartridge. This could be significant if the cartridge is say, left at the 
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scene or found at a suspect's house. 

Breech Marks 

By far the most common impressed action marks on cartridge cases are breech marks. Most 
fired cartridge cases are identified as having been fired by a specific firearm through the 
identification of breech marks. 

Very high pressures are generated within a firearm when a cartridge is discharged. These 
pressures force the bullet from the cartridge case and down the barrel at very high velocities. 
When a firearm is discharged, the shooter will feel the firearm jump rearward. This rearward 
movement of the firearm is called recoil. Recoil is for the most part caused by the cartridge 
case moving rearward as an opposite reaction to the pressures generated to force the bullet 
down the barrel. 

When the head or base of the cartridge case moves rearward, it strikes what is called the 
breech face of the firearm. The image below shows the breech face of a 12 Gauge, single-shot 
shotgun. 




The breech face rests against the head of the cartridge case and holds the cartridge case in 
the chamber of the firearm. When the head of a cartridge case slams against the breech face, 
the negative impression of any imperfections in the breech face are stamped into either the 
primer of the cartridge case or the cartridge case itself. The image below shows the primer of a 
shotshell fired in the above shotgun. 




Breech marks come in various forms. Those seen above are called parallel breech marks 
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because the marks are a series of parallel lines. Another form of breech marks are circular 
breech marks. Breech marks can also show no obvious pattern. They may have a stippled or 
mottled appearance. 

Ejector Marks 

Ejector marks are sometimes created when cartridges or cartridge cases are ejected from the 
action of a firearm. Ejector marks can be either striated or impressed but the impressed ejector 
marks not only can be used to identify a cartridge case as having passed through a firearm's 
action they can also be an indication that the cartridge case was fired in the firearm. Ejector 
marks can only be produced when the cartridge cases were fired in the firearm and not by 
simply hand chambering and ejecting a live cartridge. 

Minimizing Firearm Evidence 

Forensic firearm evidence is an overwhelmingly powerful tool. How can the operative minimize 
the evidence he leaves behind at the scene of an assassination or sabotage attack with a 
firearm. Here are some guidelines to follow in order to minimize the evidence which a firearm 
attack will leave behind. 

- With rifles and handguns, use only all-lead hollow point bullets unless the job requires FMJ 
ammo to be used. With an FMJ or other type of jacketed bullet, the jacket tends to get peeled 
back or right off but it retains the rifling marks mostly intact. With an all-lead, hollow point 
bullet, on the other hand, rifling marks tend to be obliterated. This is true even when fired into a 
soft target. In some jurisdictions handgun caliber, hollow point bullets are banned. In this case 
the operative will have to fabricate his own. Pre-fragmented bullets, which are made from 
powdered lead, are also available. These bullets strike the target and are smashed into 
powder. This type of ammo does not have the penetration power of the standard types but will 
leave not a trace of rifling impressions. Of course cartridge case evidence must also be 
considered. 

- With shotguns the real concern is not the projectile (most shotguns do not have rifling and 
therefore impart no impressions on the shot or slug projectiles) but the spent shells. The firing 
pin impressions and other cartridge case marks can be used to match a shotgun to a crime if 
spent shells are left behind. The spent shells must be retrieved in order to prevent evidence 
from being obtained to link the weapon to the crime. This is usually not possible. 

- Wear gloves in order to prevent fingerprints on the weapon if it must be discarded hastily and 
to prevent gunshot residue from being present on your hands if you are apprehended. 

- Ammo to be used in an attack can be chambered in and then manually ejected from a firearm 
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other than the one to be used. This will leave marks on the cartridge case which will confuse 
the examination and make positive matching of weapon to the ammunition components more 
difficult. 

- A good trick is to use a weapon which does not eject spent shells (revolver or break-open 
type shotgun or rifle) or is equipped with a brass catcher and then intentionally leave spent 
shells of a similar type but fired from a different weapon behind. Spent shells used for this 
should be obtained wherever people go to shoot such as shooting ranges and garbage dumps. 
A .38 special or .357 magnum revolver can cause a great deal of confusion when employed 
this way because they can fire projectiles which are identical to those fired by a. 38 super, 
9mm, .380 and a number of others. This means that with a .38 or .357 magnum if no shell 
casings are left behind the investigator can't be sure which type of weapon was used. If shell 
casings from a .38 super, for instance, are left at the scene of an attack where a .38 special 
was actually used the firearms investigator will have to conclude that a .38 super was used. 

- After a firearm is used in an attack it will have to be destroyed, altered to remove identifiable 
characteristics or cached. If a weapon is to be destroyed, every part must be damaged enough 
to make examination impossible. The barrel, bolt head, firing pin, extractor and ejector must be 
damaged beyond the possibility of examination. In order to alter a weapon the barrel and firing 
pin, at minimum must be altered. The firing pin can be removed and replaced or ground slightly 
to change the shape of its impression without much trouble. The barrel is a different matter; the 
barrel will have to be replaced. Most handguns and rifles have barrels which can be removed. 
However replacement barrels can cost more than the weapon is worth, in this case the best 
option is to cache the weapon safely and make it a resource for the future. See the section on 
Weapons Caching for notes on this. 

Bomb Investigations 

Police investigators are able to gain quite a bit of information from even an exploded bomb. 
Instrumental analyses of explosives and residues can determine whether substances are high 
explosive, low explosive, or explosive or incendiary mixtures; whether the composition of the 
substances is consistent with known explosive products; and the type of explosives. Explosive 
residue can be deposited on metal, plastic, wood, paper, or glass. Residue may be deposited 
after handling, storing, or initiating an explosive. 

The operative must make every effort to minimize the amount and value of evidence which an 
investigator can obtain. Here are some guidelines for minimizing evidence in bombings: 

- An exploded bomb will yield less evidence and will take much more time and effort to 
investigate than an unexploded one. Also, a bomb which fizzles makes you look 
unprofessional and less than committed, which reflects a similar appearance upon our whole 
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movement. Make sure your bomb will function. 

- Use the most commonly available components you can obtain. 

- Don't purchase any parts which could be scrounged at junkyards or garbage dumps. 

- Use homemade propellant unless you are sure that the commercial propellant you use can 
not be traced. Remember the police "Ident" lab will be able to identify almost any commercial 
explosive from just one grain of it, it is even possible to identify an explosive from its residue. 

- Remove any labels, logos, serial numbers or distinguishing marks from bomb components 
such as batteries, clockworks, circuit boards or electronic delays as the investigator may be 
able to get batch or lot numbers from your components allowing them to discover when and 
where they were purchased. 

- Be sure to wear gloves during the entire process of constructing and delivering the bomb to 
eliminate the possibility of leaving fingerprints behind. 

- Don't leave any hair, saliva, blood, clothing, vehicle or furniture fibers upon or within the 
bomb. The bomb investigator knows that this type of evidence often gets caught within the 
threads of a pipe-bomb and can often survive the explosion. This is another good reason to be 
sure that these parts are well cleaned and lubed. Saliva can be used to obtain a DNA sample, 
which is better than a signed confession to prosecutors. Don't lick the envelope or postage (or 
anything else for that matter) on a package or mail bomb. 

- Never purchase any bomb components with a credit card or check as this leaves a paper trail 
back to you. When buying parts be sure not to draw attention to yourself, a purchase of 24, 1' 
threaded pipe sections and 48 end caps will definitely raise suspicions and ensure that store 
employees and other customers will take a good look at you. Remember never buy any parts 
which could be scrounged or made. 

Forensic Computer Evidence 

Forensic computer examinations can: 

- Determine what type of data files are in a computer 

- Compare data files to known documents and data files 

- Determine the time and sequence that data files were created 
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- Extract data files from the computer 

- Recover deleted files from the computer 

- Search data files for keywords or phrases (Such as explosive, nigger, Hitler etc.) 

- Recover and decrypt passwords 

- Analyze and compare source code 

The amount of forensic computer evidence obtained by investigators can be greatly reduced 
by using the best possible encryption programs with unique and complex passwords. Don't 
write your passwords down and don't include any obvious phrases or numbers. 

Ink and Handwriting Evidence 

Examinations can compare the formulation of known and questioned ink including pen, 
typewriter ribbon and stamp pad ink. When ink formulations are the same, it is not possible to 
determine whether the ink originated from the same source to the exclusion of others. Writing 
instruments should be "sterile", in that they should not be used by the operative before or after 
use in an action. 

Handwriting evidence allows the examiner to determine, with reasonable accuracy, if an 
evidence sample of handwriting was produced by a given suspect. 

This type of evidence is of concern to the operative in cases of Fraud, Death Threats, Mail 
Bombs and when signed receipts and other documents are part of a mission. Writing with the 
opposite hand, purposely distorting the natural writing method, and using block letters are all 
tricks which the operative can use to reduce this type of evidence. 

Toxicology 

Toxicology examinations can disclose the presence of drugs or poisons in biological 
specimens (i.e. deceased targets). The examinations can determine the circumstances 
surrounding drug- or poison-related homicides, suicides, or accidents. 

The most readily identified toxins include: 

- Volatile compounds (ethanol, methanol, isopropanol) 

- Heavy metals (arsenic) 
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- Nonvolatile organic compounds (drugs of abuse, pharmaceuticals) 

- Miscellaneous (strychnine, cyanide) 

The operative should not store any poisons where investigators can find them. Make up 
poisons only as the are needed. Toxins such as Ethylene Glycol or Methanol are commonly 
used chemicals and do not have significant potential as evidence against the operative. 

Criminal Profiling 

Investigators will use a technique called profiling whenever there is a particularly difficult case 
or series of cases to solve. This process attempts to make an educated guess at the suspect's 
identity by analyzing crime scene evidence. Factors such as the suspect's age, race, level of 
education, employment, social status, and even where he or she lives can be deduced with 
reasonable accuracy. 

In order to thwart the efforts of criminal profilers the operative must: 

- Leave as little evidence as possible behind at crime scenes. 

- Use simple language when making threats or claiming responsibility for actions. 

- Never attack any target near your residence or any former residence, near your place of 
work, or along any routes which you travel often. Law enforcement profilers know that these 
types of attacks are often made upon targets which are in areas familiar to the perpetrator. The 
first attack an operative makes is particularly important because profilers know that a 
perpetrator almost always makes his first attack against a familiar target. 

- Don't develop a pattern in your attacks which will allow law enforcement to predict when and 
where you will next strike. Vary the types of attacks, the time of day, day of the week and 
attack targets in as wide a geographical area as possible. 
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